Wishbone

Disclosed May 28, 20209,705,172 accountsUnverified

In January 2020, the mobile app to "compare anything" Wishbone suffered another data breach which followed their breach from 2016. An extensive amount of personal information including almost 10M unique email addresses alongside names, phone numbers geographic locations and other personal attributes were leaked online and extensively redistributed. Passwords stored as unsalted MD5 hashes were also included in the breach.

What is known

People affected	9,705,172 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	May 28, 2020
Happened	Jan 27, 2020
Attack	Not stated
Data exposed	Credentials and tokensDates of birthEmailsLocationIP addressesNamesPasswordsPhone numbers
Sector	Tech
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Wishbone (2020)

Notices filed

Accounts in the dataMay 28, 2020

Have I Been Pwned9,705,172 people

Other breaches at Wishbone

Breach, details not statedExposed credentials and tokens, dates of birth, emails, names and phone numbers.2.2M accountsTechUnverifiedMar 15, 2017

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Wishbone